CloudQuery News

Security

Introducing the Zoom Source Integration

•

TL;DR

The new CloudQuery Zoom Source Integration syncs your Zoom workspace data - users, roles, groups, and group admins - into any supported destination. This makes it possible to run SQL queries for least-privilege reviews, identify elevated permissions, and cross-reference Zoom accounts against identity providers like Okta.

Zoom has become a staple for remote collaboration, but managing user access and permissions across a growing workspace can get messy. Who has admin privileges? Are there accounts that should have been deprovisioned? The answers usually require clicking through the Zoom admin console one user at a time.

The new Zoom Source Integration changes that. You can now sync Zoom workspace data into PostgreSQL, Snowflake, BigQuery, or any other destination supported by CloudQuery and query it with SQL.

What Does the Zoom Integration Sync? #

The integration pulls data from the Zoom API for the following resources:

Users into the zoom_users table
Roles into the zoom_roles table
Role memberships into the zoom_role_members table
Groups into the zoom_groups table
Group admins into the zoom_group_admins table

This gives you the raw material for access audits, compliance checks, and cross-platform identity reconciliation.

Security and Governance Use Cases #

Here's where it gets useful. Once your Zoom data is in a SQL-queryable format, you can answer questions that would otherwise require manual investigation.

Find All Users and Their Zoom Roles #

For least-privilege reviews, you need to know who has elevated permissions. This query joins users with their assigned roles:

SELECT
  u.id AS user_id,
  u.email,
  r.id AS role_id,
  r.name AS role_name
FROM zoom_role_members rm
JOIN zoom_users u ON u.id = rm.user_id
JOIN zoom_roles r ON r.id = rm.role_id
ORDER BY u.email, r.name;

The output shows every user alongside the roles they've been assigned. If someone has an "Admin" or "Owner" role who shouldn't, you'll spot it here.

Identify Group Administrators #

Group admins can manage members within their assigned groups - a permission that's easy to hand out and forget about. This query surfaces all group admin assignments:

SELECT
  u.id AS user_id,
  u.email,
  g.id AS group_id,
  g.name AS group_name
FROM zoom_group_admins ga
JOIN zoom_users u ON u.id = ga.user_id
JOIN zoom_groups g ON g.id = ga.group_id
ORDER BY u.email, g.name;

Cross-Reference Zoom Users Against Okta #

If you're also using the Okta Source Integration, you can find Zoom accounts that don't have a corresponding Okta identity. These are often former employees, contractors whose access wasn't revoked, or shadow accounts:

SELECT
  u.id AS user_id,
  u.email
FROM zoom_users u
LEFT JOIN okta_users o
  ON LOWER(o.profile->>'email') = LOWER(u.email)
WHERE o.id IS NULL
ORDER BY u.email;

This query returns Zoom users with no matching Okta account - a good starting point for cleanup.

Getting Started #

To start syncing Zoom data, see the Zoom Source Integration documentation for authentication setup and configuration examples.

If you're new to CloudQuery, download CloudQuery to get started, or check out the quick start guide.

Frequently Asked Questions #

What Data Does the Zoom Integration Sync? #

The integration syncs users, roles, role memberships, groups, and group administrators from your Zoom workspace.

How Do I Authenticate the Zoom Integration? #

The integration uses Zoom's Server-to-Server OAuth authentication. You'll need to create a Server-to-Server OAuth app in the Zoom App Marketplace and provide the credentials in your CloudQuery configuration file.

Can I Query Zoom Meeting Data? #

The current release focuses on user and access management data. Meeting data may be added in future releases based on community feedback.

How Can I Find Users with Elevated Zoom Permissions? #

Join the zoom_role_members table with zoom_users and zoom_roles to see which users have been assigned administrative or privileged roles.

Can I Cross-Reference Zoom Users with Other Identity Providers? #

Yes. CloudQuery supports syncing from multiple sources to the same destination. You can join Zoom data with Okta, Azure AD, Google Workspace, or other identity provider integrations to find orphaned accounts or permission mismatches.

What Destinations Can I Sync Zoom Data To? #

Any destination supported by CloudQuery, including PostgreSQL, Snowflake, BigQuery, ClickHouse, S3, and more. See the full list of destination integrations.

Questions or feedback? Join the CloudQuery Community.